SYSTEM, METHOD, AND BUSINESS METHODS FOR ENFORCING PRIVACY 
PREFERENCES ON PERSONAL-DATA EXCHANGES ACROSS A NETWORK 


ABSTRACT 

A system, method, and business method is used to enforce privacy preferences on exchanges of 
5 personal data over a computer network. There are one or more data-subject (subject) rule sets 
that have one or more subject constraints on one or more private, subject data releases. A 
receiving process receives a request message from a data-requester (requester) over a network 
interfaces. The request message has one or more requests for one or more of the private, subject 
data releases pertaining to a subject, and a requester privacy statement for each of the respective 
10 private data. A release process compares the requester privacy statement to the subject 
constraints (authorization rules) and releases the private, subject data release in a response 
message to the requester only if the subject constraints are satisfied. 
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